HyperFound — Cookie Policy
Last updated: 25 June 2026. Binding language: English.
This Policy explains how HyperFound (operated by Tom Marx, autónomo, Sotogrande, Spain) uses cookies and similar device-storage technologies on hyperfound.ai and the HyperFound app. Statutory basis: LSSI-CE Art. 22.2 and the GDPR / Spanish LOPDGDD. We obtain prior consent for non-essential storage and rely on the strictly-necessary exemption for the rest.
1. What these technologies are
Cookies and similar technologies (localStorage, sessionStorage) store small amounts of data on your device. Spanish law (Art. 22.2 LSSI) covers all such storage, not only cookies.
2. Cookies & storage we use
The only non-essential technology on our site is analytics (Google Analytics 4). We use no advertising, retargeting, or social-media tracking cookies.
| Name | Purpose | Duration | Category | Consent? |
|---|---|---|---|---|
sb-* (Supabase auth) | Keep you signed in (access/refresh) | Session / refresh | Strictly necessary | No |
hf_active_org | Remember your active organisation | Session | Strictly necessary | No |
*_oauth_state (GA4/GSC/Slack) | OAuth security (CSRF) during connect | ~10 min | Strictly necessary | No |
| shared-link session | Authenticate a password-protected share view | Per view | Strictly necessary | No |
hf_consent (localStorage) | Remember your cookie choice | Persistent | Strictly necessary | No |
theme (localStorage) | Remember light/dark preference | Persistent | Functional (necessary) | No |
hf_promo (sessionStorage) | Carry a promo code through signup | Tab session | Functional (necessary) | No |
_ga, _ga_* | Google Analytics — usage measurement | 2 years | Analytics (non-essential) | Yes |
3. Analytics & your consent
Google Analytics 4 runs in Google Consent Mode v2, denied by default — until you consent, no analytics cookies (_ga, _ga_*) are set and GA runs in a cookieless mode. On your first visit a cookie-settings notice appears; you grant or refuse analytics there, and "Reject" is as easy as "Accept." Refusing leaves all non-essential storage off. You can change your choice at any time via the "Cookie settings" link in our footer. Analytics is suppressed entirely on shared-link pages.
International transfer: GA4 data may be processed by Google LLC (US); such transfers rely on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. See our Privacy Policy.
4. Managing cookies
Use the "Cookie settings" link (in the footer, or the button on this page) to change a saved choice — the cookie-settings notice reappears. You can also use your browser settings to block or delete cookies; blocking strictly-necessary cookies may break sign-in and core functions.
5. Changes & contact
We update this Policy as our practices change; the "Last updated" date reflects the current version. Questions: tom@hyperfound.ai.